Interactive analyst tools built on the same public threat-intel data that powers the ThreatFilter feed. Free, no signup, no tracking, work in any modern browser.
Look up APT groups, map shared TTPs, and export an ATT&CK Navigator layer.
Pick one or more threat groups (APT41, FIN7, Lazarus, ...) and instantly see every MITRE ATT&CK technique they share. Heat-mapped matrix, per-group profile, mind-map and kill-chain Flows views. Exports a Navigator layer JSON ready for the official ATT&CK Navigator.
Every ATT&CK group's IOCs (MD5/SHA-1/SHA-256/domains/IPs) in one copy-paste window.
Aggregates current malware-family IOCs for every MITRE ATT&CK group from abuse.ch ThreatFox + MalwareBazaar. Toggle between a per-group view and a deduplicated master list, with one-click copy by indicator type. Family-attributed; refreshed on a schedule.